Re: (RADIATOR) problem with multiple realms in one username

2002-07-08 Thread Hugh Irvine


Hello Slava -

You don't actually say what your requirements are - could you give me some 
more details on what exactly you want to do?

BTW - if you want a handler to match slave.com as different to 
slava.com@SLAVA, you should do this:

Handler User-Name = /slava.com$/
.
/Handler

which will match slava.com only at the end of the User-Name string.

regards

Hugh

On Mon, 8 Jul 2002 18:13, [EMAIL PROTECTED] wrote:
  Hi Guys,

  We've got Radiator running on our side. Recently I've found really strange
 behaviour of Radiator, - the problem comes then username in the incoming
 RADIUS packet looks like username@realmone@realmtwo (please see the live
 example from the log file):

 ... skipped .

 Mon Jul  8 04:20:39 2002: DEBUG: Packet dump:
 *** Received from 10.10.10.10 port 51675 
 Code:   Access-Request
 Identifier: 185
 Authentic:  136100so00513008400
 Attributes:
 User-Name = [EMAIL PROTECTED]@SLAVA
 User-Password =
 .177238e210203(23518920021226r52419
 NAS-Identifier = i-Pass VNAS
 NAS-IP-Address = 10.10.10.10
 NAS-Port = 1
 Service-Type = Framed-User
 Framed-Protocol = PPP


 Mon Jul  8 04:20:39 2002: DEBUG: Check if Handler Realm=slava.com should be
 used to handle this request
 Mon Jul  8 04:20:39 2002: DEBUG: Handling request with Handler
 'Realm=slava.com'

 ... skipped .


 In the configuration file we have a handler like Handler Realm=slava.com
 ... /Handler, so we expect that it satisfies all usernames like
 [EMAIL PROTECTED].. But, as the reality showed, it matches
 [EMAIL PROTECTED]@SLAVA too..

 Most probably that's expected behaviour of Radiator, but how we should
 change our Handler Handler Realm=.. to work it properly according to our
 needs?

 Thank you so much for your help!

 sincerely yours,

 Slava Rimdenok


 Sviatoslav Rimdenok
 System Administrator
 COLT Telecom AG
 Badenerstrasse 820
 CH-8048 Zürich

 t:+41 1 5 600 900
 f:+41 1 5 600 910
 e:mailto:[EMAIL PROTECTED]
www.colt.ch

 we make business straight.forward


 ===
 Archive at http://www.open.com.au/archives/radiator/
 Announcements on [EMAIL PROTECTED]
 To unsubscribe, email '[EMAIL PROTECTED]' with
 'unsubscribe radiator' in the body of the message.

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



RE: (RADIATOR) problem with multiple realms in one username

2002-07-08 Thread sviatoslav . rimdenok


Hi Hugh,

thank you for your quick response!

I'd like to have handler that matches only [EMAIL PROTECTED], and do not
match [EMAIL PROTECTED]@SLAVA, [EMAIL PROTECTED]@BLABLABLA nor
username@[EMAIL PROTECTED] and so on..

that means : to match the rule it must be only one realm name (for example
[EMAIL PROTECTED]@SLAVA has 2 realms inside) and that realm must be
slava.com

thanks again for your help!

see you,
Slava

-Original Message-
From: Hugh Irvine [mailto:[EMAIL PROTECTED]]
Sent: Montag, 8. Juli 2002 11:28
To: Rimdenok, Sviatoslav; [EMAIL PROTECTED]
Subject: Re: (RADIATOR) problem with multiple realms in one username



Hello Slava -

You don't actually say what your requirements are - could you give me some 
more details on what exactly you want to do?

BTW - if you want a handler to match slave.com as different to 
slava.com@SLAVA, you should do this:

Handler User-Name = /slava.com$/
.
/Handler

which will match slava.com only at the end of the User-Name string.

regards

Hugh

On Mon, 8 Jul 2002 18:13, [EMAIL PROTECTED] wrote:
  Hi Guys,

  We've got Radiator running on our side. Recently I've found really
strange
 behaviour of Radiator, - the problem comes then username in the incoming
 RADIUS packet looks like username@realmone@realmtwo (please see the live
 example from the log file):

 ... skipped .

 Mon Jul  8 04:20:39 2002: DEBUG: Packet dump:
 *** Received from 10.10.10.10 port 51675 
 Code:   Access-Request
 Identifier: 185
 Authentic:  136100so00513008400
 Attributes:
 User-Name = [EMAIL PROTECTED]@SLAVA
 User-Password =
 .177238e210203(23518920021226r52419
 NAS-Identifier = i-Pass VNAS
 NAS-IP-Address = 10.10.10.10
 NAS-Port = 1
 Service-Type = Framed-User
 Framed-Protocol = PPP


 Mon Jul  8 04:20:39 2002: DEBUG: Check if Handler Realm=slava.com should
be
 used to handle this request
 Mon Jul  8 04:20:39 2002: DEBUG: Handling request with Handler
 'Realm=slava.com'

 ... skipped .


 In the configuration file we have a handler like Handler Realm=slava.com
 ... /Handler, so we expect that it satisfies all usernames like
 [EMAIL PROTECTED].. But, as the reality showed, it matches
 [EMAIL PROTECTED]@SLAVA too..

 Most probably that's expected behaviour of Radiator, but how we should
 change our Handler Handler Realm=.. to work it properly according to our
 needs?

 Thank you so much for your help!

 sincerely yours,

 Slava Rimdenok


 Sviatoslav Rimdenok
 System Administrator
 COLT Telecom AG
 Badenerstrasse 820
 CH-8048 Zürich

 t:+41 1 5 600 900
 f:+41 1 5 600 910
 e:mailto:[EMAIL PROTECTED]
www.colt.ch

 we make business straight.forward


 ===
 Archive at http://www.open.com.au/archives/radiator/
 Announcements on [EMAIL PROTECTED]
 To unsubscribe, email '[EMAIL PROTECTED]' with
 'unsubscribe radiator' in the body of the message.

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) problem with multiple realms in one username

2002-07-08 Thread Hugh Irvine


Hello Slava -

# Handler for [EMAIL PROTECTED]

Handler User-Name = /\@slava.com$/
.
/Handler

# Handler for [EMAIL PROTECTED]@whatever

Handler User-Name = /\@slava.com\@/
.
/Handler


regards

Hugh


On Mon, 8 Jul 2002 20:17, [EMAIL PROTECTED] wrote:
 Hi Hugh,

 thank you for your quick response!

 I'd like to have handler that matches only [EMAIL PROTECTED], and do not
 match [EMAIL PROTECTED]@SLAVA, [EMAIL PROTECTED]@BLABLABLA nor
 username@[EMAIL PROTECTED] and so on..

 that means : to match the rule it must be only one realm name (for example
 [EMAIL PROTECTED]@SLAVA has 2 realms inside) and that realm must be
 slava.com

 thanks again for your help!

 see you,
 Slava

 -Original Message-
 From: Hugh Irvine [mailto:[EMAIL PROTECTED]]
 Sent: Montag, 8. Juli 2002 11:28
 To: Rimdenok, Sviatoslav; [EMAIL PROTECTED]
 Subject: Re: (RADIATOR) problem with multiple realms in one username



 Hello Slava -

 You don't actually say what your requirements are - could you give me some
 more details on what exactly you want to do?

 BTW - if you want a handler to match slave.com as different to
 slava.com@SLAVA, you should do this:

 Handler User-Name = /slava.com$/
   .
 /Handler

 which will match slava.com only at the end of the User-Name string.

 regards

 Hugh

 On Mon, 8 Jul 2002 18:13, [EMAIL PROTECTED] wrote:
   Hi Guys,
 
   We've got Radiator running on our side. Recently I've found really

 strange

  behaviour of Radiator, - the problem comes then username in the
  incoming RADIUS packet looks like username@realmone@realmtwo (please
  see the live example from the log file):
 
  ... skipped .
 
  Mon Jul  8 04:20:39 2002: DEBUG: Packet dump:
  *** Received from 10.10.10.10 port 51675 
  Code:   Access-Request
  Identifier: 185
  Authentic:  136100so00513008400
  Attributes:
  User-Name = [EMAIL PROTECTED]@SLAVA
  User-Password =
  .177238e210203(23518920021226r52419
  NAS-Identifier = i-Pass VNAS
  NAS-IP-Address = 10.10.10.10
  NAS-Port = 1
  Service-Type = Framed-User
  Framed-Protocol = PPP
 
 
  Mon Jul  8 04:20:39 2002: DEBUG: Check if Handler Realm=slava.com should

 be

  used to handle this request
  Mon Jul  8 04:20:39 2002: DEBUG: Handling request with Handler
  'Realm=slava.com'
 
  ... skipped .
 
 
  In the configuration file we have a handler like Handler
  Realm=slava.com ... /Handler, so we expect that it satisfies all
  usernames like [EMAIL PROTECTED].. But, as the reality showed, it matches
  [EMAIL PROTECTED]@SLAVA too..
 
  Most probably that's expected behaviour of Radiator, but how we should
  change our Handler Handler Realm=.. to work it properly according to
  our needs?
 
  Thank you so much for your help!
 
  sincerely yours,
 
  Slava Rimdenok
 
 
  Sviatoslav Rimdenok
  System Administrator
  COLT Telecom AG
  Badenerstrasse 820
  CH-8048 Zürich
 
  t:  +41 1 5 600 900
  f:  +41 1 5 600 910
  e:mailto:[EMAIL PROTECTED]
 www.colt.ch
 
  we make business straight.forward
 
 
  ===
  Archive at http://www.open.com.au/archives/radiator/
  Announcements on [EMAIL PROTECTED]
  To unsubscribe, email '[EMAIL PROTECTED]' with
  'unsubscribe radiator' in the body of the message.

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.